CVE-2026-41870: Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)

<p>Posted by Sebastian Nagel on Sep 08</p>Severity: critical <br /> <br /> Affected versions:<br /> <br /> - Apache Nutch 1.11 through 1.22<br /> <br /> Description:<br /> <br /> Missing Authorization, Improper Control of Generation of Code (&apos;Code Injection&apos;), Improper Control of <br /> Dynamically-Managed Code Resources, Use of Externally-Controlled Input to Select Classes or Code (&apo